$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft File: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft (raw, json) Hash identifier: ipPs8jBP4vPe2ftUPxuj214jnlsVKrbXiD+QLoqxcdo= Subject key identifier: 53:14:9B:78:8B:A5:93:9A:26:53:B0:5F:47:D0:02:B6:69:D7:99:DD Authority key identifier: CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 Certificate issuer: /CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Certificate serial: 188DE061A25EFAF9E7AC8EDCEC360E4DB5C582E9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft Manifest number: E9 Signing time: Sun 11 Oct 2026 23:41:13 +0000 Manifest this update: Sun 11 Oct 2026 23:36:13 +0000 Manifest next update: Thu 15 Oct 2026 01:20:13 +0000 Files and hashes: 1: 3130332e3137372e3136322e302f32332d3234203d3e20313439303537.roa (hash: jgtfx24D6pLUOGIrP0FsDFNvF8xIgwwrZ2kQ0C7L36A=) 2: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl (hash: LofNbgcOyY+yDoTAMyisNYHxg9VQtNlPBvRBh3i07Es=) 3: 3136332e35332e35322e302f32322d3234203d3e203531383437.roa (hash: QuYF2uZ6IZ+l3FPWrOqcXWtoS7S46LuH4kJESx2x1Qs=) 4: 3136332e35332e35322e302f32322d3234203d3e20313439303537.roa (hash: uICx57p5+jtBkGMOR0tDJ+Anre9HEKQERsFBp0N7f88=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:8d:e0:61:a2:5e:fa:f9:e7:ac:8e:dc:ec:36:0e:4d:b5:c5:82:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Validity Not Before: Oct 11 23:36:13 2026 GMT Not After : Oct 15 01:20:13 2026 GMT Subject: CN=53149B788BA5939A2653B05F47D002B669D799DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:09:a0:dd:e4:7e:2c:30:40:cd:ad:cb:99:8a: 09:7f:6c:40:74:47:61:fc:01:9c:c1:cf:34:c7:20: f4:fc:3f:db:f1:b9:4b:12:5b:59:23:f0:b2:c0:2a: c4:f8:88:5f:80:d4:0f:bd:a8:79:94:c2:c1:8c:da: 9f:16:84:c5:ff:ae:18:22:b4:1f:80:b4:ea:50:c7: fe:1e:61:72:2d:99:16:ee:04:90:11:8e:07:6e:42: 8c:2f:0b:fb:1b:ec:b2:d9:1f:e7:9e:33:8c:1f:1a: e5:5a:91:f4:0a:47:9b:60:3c:ed:ff:a0:b7:d6:2c: 9e:b5:b8:9f:80:81:c3:c0:04:23:e8:ed:d7:88:8f: e5:99:c1:2c:16:c1:45:18:16:f8:cf:01:d6:fc:d3: fc:82:81:78:28:d7:94:c0:e8:f6:5a:7c:03:1f:d8: 1e:e7:ba:95:54:c4:63:4e:c6:10:46:55:19:b2:65: 93:d6:74:f2:a2:7f:f8:85:fe:7d:0f:33:05:34:3e: af:ba:b9:fd:b1:68:d9:f8:b6:89:5a:89:40:df:a4: e4:c2:4a:83:dc:6d:c4:f3:27:c1:f3:6d:be:52:a3: 01:41:a7:99:5a:3a:2e:44:76:3a:aa:64:e0:55:f2: 2e:dd:df:e0:38:aa:66:a3:5c:ca:05:12:0c:a6:7c: 2a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:14:9B:78:8B:A5:93:9A:26:53:B0:5F:47:D0:02:B6:69:D7:99:DD X509v3 Authority Key Identifier: keyid:CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:c5:5c:3d:2c:a7:ea:5f:bb:83:bc:59:60:41:14:57:43:76: 5f:19:4c:89:84:32:a5:47:b0:dc:81:d5:7a:e7:c2:c7:ce:68: 77:a8:04:61:58:5e:28:ff:a6:e2:ee:00:fd:4b:27:19:f8:42: e2:c6:1a:0d:dd:c9:c8:02:ca:2b:a3:83:dd:12:d1:c6:f0:71: 3c:f0:73:7c:e9:8d:48:4e:d8:f7:bd:36:57:37:37:04:b4:48: 12:c1:28:9c:84:cf:16:20:9c:2e:f3:09:e3:77:5f:93:d4:3d: af:b6:16:bf:b1:d9:23:45:00:90:49:9a:11:3f:c2:89:8a:36: 1f:74:af:fe:b9:92:15:5c:a8:2d:8f:ee:a6:2d:eb:88:42:49: 41:40:2a:61:16:ea:96:17:f3:a7:33:54:23:43:27:a5:f3:b3: da:ed:e5:4f:cc:29:da:a3:03:ee:94:21:d0:a0:78:1e:7f:d0: 0b:c4:01:9f:82:7e:2c:e7:fe:bc:33:be:06:20:70:cb:d9:dd: 39:cb:21:9d:0b:68:c1:74:4c:f4:86:87:49:ab:4b:23:3c:f0: 70:f5:8e:35:8f:db:03:e0:99:99:64:5e:4e:38:33:35:28:5f: bf:7f:61:0b:5b:f2:60:93:75:0e:1f:9d:a1:56:b8:38:79:d3: 32:5a:c5:c1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGI3gYaJe+vnnrI7c7DYOTbXFgukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5 NEQ2OUJCOTAeFw0yNjEwMTEyMzM2MTNaFw0yNjEwMTUwMTIwMTNaMDMxMTAvBgNV BAMTKDUzMTQ5Qjc4OEJBNTkzOUEyNjUzQjA1RjQ3RDAwMkI2NjlENzk5REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCaDd5H4sMEDNrcuZigl/bEB0 R2H8AZzBzzTHIPT8P9vxuUsSW1kj8LLAKsT4iF+A1A+9qHmUwsGM2p8WhMX/rhgi tB+AtOpQx/4eYXItmRbuBJARjgduQowvC/sb7LLZH+eeM4wfGuVakfQKR5tgPO3/ oLfWLJ61uJ+AgcPABCPo7deIj+WZwSwWwUUYFvjPAdb80/yCgXgo15TA6PZafAMf 2B7nupVUxGNOxhBGVRmyZZPWdPKif/iF/n0PMwU0Pq+6uf2xaNn4tolaiUDfpOTC SoPcbcTzJ8Hzbb5SowFBp5laOi5EdjqqZOBV8i7d3+A4qmajXMoFEgymfCq3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUxSbeIulk5omU7BfR9ACtmnXmd0wHwYDVR0j BBgwFoAUzKO7c4mfeDNMoD1tpNj9P5TWm7kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODM4NTQ1NTU1ODIzMDAxNy8wL0NDQTNCQjczODk5Rjc4MzM0Q0EwM0Q2REE0RDhG RDNGOTRENjlCQjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5NEQ2OUJCOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODgzODU0NTU1NTgyMzAwMTcvMC9DQ0EzQkI3Mzg5OUY3 ODMzNENBMDNENkRBNEQ4RkQzRjk0RDY5QkI5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8VcPSyn6l+7 g7xZYEEUV0N2XxlMiYQypUew3IHVeufCx85od6gEYVheKP+m4u4A/UsnGfhC4sYa Dd3JyALKK6OD3RLRxvBxPPBzfOmNSE7Y9702Vzc3BLRIEsEonITPFiCcLvMJ43df k9Q9r7YWv7HZI0UAkEmaET/CiYo2H3Sv/rmSFVyoLY/upi3riEJJQUAqYRbqlhfz pzNUI0MnpfOz2u3lT8wp2qMD7pQh0KB4Hn/QC8QBn4J+LOf+vDO+BiBwy9ndOcsh nQtowXRM9IaHSatLIzzwcPWONY/bA+CZmWReTjgzNShfv39hC1vyYJN1Dh+doVa4 OHnTMlrFwQ== -----END CERTIFICATE-----Generated at Tue Oct 13 04:05:34 2026 by rpki-client